Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0Msu6gasoN97caAsuHG1diRM_i0.roa
File: 0Msu6gasoN97caAsuHG1diRM_i0.roa (raw, json)
Hash identifier: fatO92AdSclcohc67TVabuoR7O2GDJt/6Ol8X97e6l4=
Subject key identifier: D0:CB:2E:EA:06:AC:A0:DF:7B:71:A0:2C:B8:71:B5:76:24:4C:FE:2D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0182C57C547AD28E9354C8B956CDF45C9708
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0Msu6gasoN97caAsuHG1diRM_i0.roa
Signing time: Mon 22 Aug 2022 12:17:15 +0000
ROA not before: Mon 22 Aug 2022 12:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 185.238.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:7c:54:7a:d2:8e:93:54:c8:b9:56:cd:f4:5c:97:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 22 12:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0cb2eea06aca0df7b71a02cb871b576244cfe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e3:ce:fd:73:c9:7c:5b:4c:51:ef:5d:0a:ee:
80:50:0a:ba:26:a9:f3:91:ea:90:ee:95:24:b6:14:
ef:de:20:30:11:f9:90:04:f1:aa:2f:fc:91:9a:9a:
c5:c1:5b:19:68:a9:8d:2f:88:dc:42:d4:de:e9:cd:
fb:c2:c5:60:9e:06:23:35:ae:01:8a:8c:33:98:b7:
f0:47:61:4f:3e:94:08:09:88:82:ba:ce:18:df:0a:
29:35:b4:c3:1e:de:c4:44:61:74:3a:ed:0d:32:ea:
28:d4:fb:c5:77:07:9e:e5:48:ec:e1:94:c7:48:9e:
55:84:3b:a0:d0:25:ca:1d:6f:60:7a:b1:1a:e8:09:
40:e2:30:2c:b2:18:ea:61:93:90:a4:53:12:f1:8a:
7e:7f:6e:aa:85:92:c9:56:6d:29:86:c5:52:fa:89:
bc:22:8f:3e:56:a2:13:58:01:bc:cf:4a:ba:7c:e2:
e9:34:67:44:64:8d:04:58:fe:bb:a9:39:e0:4a:da:
69:46:3b:cb:e9:a0:9a:3f:ff:ce:31:84:32:66:39:
45:b4:d7:29:a4:34:6b:13:3e:8d:09:93:30:53:a2:
1f:03:0d:8c:99:45:3f:e2:22:dc:97:1b:e8:14:7c:
44:f4:3a:a1:92:3a:20:31:af:79:0e:11:1a:51:b9:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:2E:EA:06:AC:A0:DF:7B:71:A0:2C:B8:71:B5:76:24:4C:FE:2D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0Msu6gasoN97caAsuHG1diRM_i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.229.0/24
Signature Algorithm: sha256WithRSAEncryption
99:30:4b:56:00:c6:ad:40:08:38:32:91:91:12:40:3c:e9:b4:
26:85:e0:2f:f5:50:40:ff:c0:f6:d6:1c:0c:d1:84:ed:92:cd:
30:6d:ee:ce:8d:cd:bc:09:0a:57:ad:39:66:fd:b9:c1:b7:82:
f5:85:8f:4f:58:95:91:02:03:40:83:64:ce:24:a4:71:8d:b2:
7b:2e:fa:19:cd:73:bf:31:9d:3b:00:eb:d5:f8:a6:a5:d7:e7:
d4:64:fc:64:2c:1d:cf:b7:cc:4e:81:a1:39:f7:3b:fc:88:df:
cd:de:9d:9c:e0:11:31:04:76:cf:90:8e:f4:3b:cc:9f:e6:69:
58:21:80:ce:28:51:4c:a0:c3:11:29:d7:33:34:d1:85:5e:c5:
b0:e9:c3:fd:51:30:d2:cb:de:98:3a:4b:78:80:b1:09:4e:2e:
f1:e3:fe:7a:d5:6c:a3:5e:99:cc:18:51:30:76:75:b7:db:b0:
f8:00:ba:77:ed:af:f2:0f:03:4f:94:f1:12:4e:92:ae:1c:52:
43:6b:12:cd:fb:a9:1a:2a:d5:f3:e9:16:cd:ed:d8:3c:a4:40:
f1:cf:4b:9c:6e:71:24:eb:76:3c:85:bd:a3:fa:01:de:67:a9:
cd:08:f2:38:1b:c5:3d:d4:5f:ea:d7:a6:cb:eb:58:9f:30:ea:
19:c0:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:19 2024 by rpki-client on console-ams.rpki-client.org